Privacy Policy

1. Who we are and what this covers

This policy is issued by 88 Cove Inc., doing business as Bild (“Bild”, “we”, “us”), the company behind EnCad (“EnCad”). It covers personal information we handle when you visit this website, contact us, book a vault assessment, or use EnCad as an authorized user of a customer.

When a customer connects EnCad to its engineering systems, the customer controls that data and we process it on the customer’s behalf under our agreement with them, including a Data Processing Agreement where applicable. In that role we act as a processor (or service provider), and the customer is the controller. Questions about how a customer uses EnCad should go to that customer first.

2. Information we collect

Information you give us. Name, work email, company, role, phone number and anything you write when you book an assessment, request the security packet, or contact us.

Account and usage information. For EnCad users: identity details from your organization’s single sign-on, role and permissions, and audit logs of searches, views and administrative actions. These logs exist so your administrators can see who did what, and can be exported to your SIEM.

Customer engineering data. Through a read-only connection, EnCad reads CAD models, drawings, part metadata, revisions and bills of materials. Personal information in this data is usually limited to names of engineers or approvers in revision history and file metadata.

Website data. Basic technical information such as browser type, pages viewed and approximate location derived from IP address, collected through server logs and [analytics provider]. We do not sell this information or use it for cross-site advertising.

3. How we use information

• To provide, secure and support EnCad for the customer that engaged us, including indexing, tagging, search and duplicate analysis of that customer’s data.
• To respond to inquiries, schedule assessments and send the information you ask for.
• To operate, monitor and improve the reliability and security of our services.
• To meet legal, contractual and compliance obligations.

We do not use customer engineering data to train models shared with other customers. Any models adapted to a customer’s data serve that customer’s tenant only.

4. How EnCad handles engineering data

• Read-only access. EnCad never writes back to your engineering systems or file vault. Changes such as part consolidation are made by your team through your own change process.
• Minimal retention. Geometry is processed into feature representations and embeddings. Native CAD files are not retained in the cloud tier unless you choose to store them there.
• Your boundary. EnCad can run in our managed cloud with tenant isolation, inside your own cloud account (customer VPC), or fully on-premises. In VPC and on-premises deployments, your engineering data does not leave your environment.
• Encryption. Data is encrypted in transit with TLS 1.2 or higher and at rest with AES-256. You can bring your own key through your KMS or HSM, and control rotation and revocation.

5. How we share information

We do not sell personal information. We share it only:

• With service providers who host, secure or support our services under written obligations consistent with this policy, such as cloud infrastructure and email providers. [List of subprocessors available on request.]
• With the customer whose EnCad tenant you use, for administration and audit.
• When required by law, or to protect the rights, safety and security of our customers, users or Bild.
• In connection with a merger, acquisition or sale of assets, subject to this policy’s protections.

6. Retention and deletion

We keep customer engineering data and derived indexes for as long as the customer’s agreement is in effect. Customers can request deletion at any time, and we delete or return the data at the end of the contract, in line with the agreement. Website inquiries are kept for as long as needed to respond and maintain a business relationship, then deleted or anonymized.

7. Security

Our security program is described on the Security page. It includes SOC 2 aligned controls, role-based access that mirrors your existing permissions, single sign-on and SCIM provisioning, least-privilege infrastructure access, continuous monitoring, annual third-party penetration testing and a defined incident response process with customer notification.

8. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent. California residents have the rights described in the CCPA and CPRA, and we do not sell or share personal information for cross-context behavioral advertising. EU, UK and Swiss residents have rights under the GDPR and may lodge a complaint with their local supervisory authority.

If your information is in a customer’s EnCad tenant, please contact that customer; we will help them respond. You can unsubscribe from our emails at any time using the link in each message.

9. International transfers

We are based in the United States. Managed cloud deployments offer US and EU data residency. Where personal information moves across borders, we use appropriate safeguards such as the EU Standard Contractual Clauses.

10. Children

EnCad and this website are built for businesses. They are not directed to children, and we do not knowingly collect information from anyone under 16.

11. Changes to this policy

We will post updates here and change the date at the top. If a change materially affects how we handle customer data, we will notify customers in advance.

12. Contact

Bild (88 Cove Inc.), San Francisco, CA. Email [privacy contact email], or reach us through the contact page. For security matters, contact security@getbild.com.